Deployment has three decisions:
- Which product features are included in the artifact.
- Which cryptographic platforms are included in the artifact.
- Which runtime mode the node is initialized with.
Read:
- Build and Features
- Configuration
- Initialization and Unseal
- Sealing and Unsealing
- Clustering
- Backup and Recovery
- Control Plane UI
- Production Checklist
Deployment shapes
| Shape | Use when | Key boundary |
|---|---|---|
| Local mono | Development and demos | One local key identity |
| Production mono | Lower-impact workflows that accept single-node compromise | One node holds full key authority |
| Threshold cluster | High-risk workflows | Quorum of peers must authorize and participate |
Mono and threshold use the same public API model. The difference is where key authority lives.
Production defaults
For production:
- build only required features
- include every required platform explicitly
- use a production authenticator
- keep the internal API private to the cluster
- terminate public API access behind explicit network policy and rate limits
- configure audit sinks before relying on compliance evidence
- keep lifecycle/import/destroy permissions separate from signing
- use threshold mode for identities with real financial, security, or compliance consequences
Do not deploy the integration image. It includes test-only failure-injection controls.